These promises are based on a number of recommendations which had been agreed by the European data protection authorities and brought forward by the Article 29 Working Party.
Google must now make the agreed further changes by 30 June 2015 and take further steps over the next two years to make sure to reach a stage at which it can be considered compliant with European privacy rules.
A look at the pledge [document removed by target page] is interesting because it also shows what other organizations should honor and think about:
- Google will provide clear, unambiguous and comprehensive information regarding data processing, including an exhaustive list of the types of data processed by Google and the purposes for which data is processed.
- Google will provide information to enable individuals to exercise their rights.
- Google will provide user resource covering data processed by Google and the purposes of processing.
- Google will implement several measures to ensure that passive users are better informed about the processing of their data and that publishers using Google products obtain the necessary consents.
- Google will enhance its guidance for employees regarding notice and consent requirements.
- Google will ensure, so far as practicable, that the requirements of the first principle are applied equally to all Google products, regardless of which terminal device the Google user is accessing them on, including mobile, tablet, desktop, and new hardware offerings.
- Google will launch a redesigned version of Account Settings, which will allow users to find a variety of controls and information more easily, and will more prominently feature the Dashboard at the top level.
What happened since 2012?
The ICO posted an interesting summary of evolution of Google vs European privacy, which I will paste here in its entirety:
24 January 2012
Google announces it will merge a number of its privacy policies to create one policy for all its products and services on 1 March 2012.
2 February 2012
1 March 2012
16 October 2012
26 February 2013
19 March 2013
Google meets with representatives of the taskforce and sets out some measures which it will implement further to the original recommendations of the Article 29 Working Party.
4 July 2013
6 December 2013
23 September 2014
Article 29 Working Party writes to Google setting out a number of recommendations which have been agreed by the European data protection authorities, including the ICO,
2 December 2014
Google responds to the Article 29 Working Party recommendations setting out a number of improvements aimed at addressing the Working Party’s concerns.
21 January 2015
Following a period of dialogue and engagement with the ICO Google agrees to sign an undertaking committing to all the changes suggested by 30 June 2015, with ongoing commitments for the next two years.
Let’s see where this never ending story takes us.